istio/old_issues_repo

Not able to curl https://www.google.com.cu from inside pod

Closed this issue · 1 comments

istioctl version 0.8
kubectl version v1.9.6-gke.1


**Is Istio Auth enabled or not ?** :-No

**What happened**: Created "serviceentry" and "destinationrule" for going out side from inside pod.But not able to  do wget https://www.google.com.cu.

**{Response}** --2018-06-01 09:21:37--  https://www.google.com.cu/
Resolving www.google.com.cu (www.google.com.cu)... 173.194.196.94, 2607:f8b0:4001:c1a::5e
Connecting to www.google.com.cu (www.google.com.cu)|173.194.196.94|:443... connected.
GnuTLS: An unexpected TLS packet was received.
Unable to establish SSL connection.

Kindly find the below yaml for the corresponding 

**{yaml}**
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: google-ext
spec:
  hosts:
  - "www.google.com"
  ports:
  - number: 443
    name: https
    protocol: HTTP
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: google-ext
spec:
  host: "www.google.com"
  trafficPolicy:
    tls:
      mode: SIMPLE # initiates HTTPS when talking to www.google.com


**What you expected to happen:**  
**{Expected Response}**
--2018-06-01 14:45:08--  https://www.google.com.cu/
Resolving www.google.com.cu... 172.217.163.35, 2404:6800:4007:80b::2003
Connecting to www.google.com.cu|172.217.163.35|:443... connected.
HTTP request sent, awaiting response... 200 OK

Note that as documented in the example, you should use: curl http://www.google.com.cu:443. The request is originated by http, to the port 443.